Hi I have a Cisco ASA connected via a single VPC to 2 Nexus switches. Each nexus switch is advertising the same route with equal cost via OSPF. Does anyone know the command to show the load balancing algorithm. It seems to be working on a per packet ...
Forum Posts
Hello,What is the easiest way to find out which snort rules are included in the latest SRU update? I couldn’t find any information on that in the SRU download section at Cisco. The latest SRU available from Cisco is Cisco Secure Rule Update 2022-10-3...
Hi, I'm working to migrate an ASA to FTD, when I run Migration Tool it's ignore esmtp inspection set on the global policy. Can I configure that policy manually on the FTD or realy is not necessary? !access-list esmtp extended deny tcp host 10.16.8.19...
HI all,I have a HA pair of ASA 5505's in a small setup. The ISP wants to provide the Internet link with our end being given the IP via DHCP.I have the ISP connection connected to a switch (on Vlan3) and the ASA's are trunked off a switch pair. So t...
We have two vFMCs. We purchased the licenses SF-FMC-VMW-K9. To my understanding these are perpetual licenses for 25 devices. I have 50 available licences on Smart License Portal. I am seeing this error message on vFMC: 'Smart License usage is out-of...
Hi,I have an issue with changing NTP and DNS values on my HA of FTD2110.The 2 FTDs are connected to my FMC.I could not find how to change the NTP servers or the DNS servers> show NTPNTP Server : 127.127.1.1Status: UnknownOffset: 0.000 (milliseconds)L...
Hello, everyone. We have implemented Anyconnect RA VPN on FTD device. However now i want to restrict from which source global IP Addresses i can connect to. I now in ASA it can be done by control-plane ACL but in FTD i do not see any place to configu...
Hi,We currently use a public /24 IP range for a server network, we just had a request to access a server in this network over an aws vpc, however aws does not support connecting to public IP's. Is there a way I can NAT this to a private IP to allow...
Hi, I have an issue with changing NTP and DNS values on my HA of FTD2110. The 2 FTDs are connected to my FMC. I could not find how to change the NTP servers or the DNS servers > show ntpNTP Server : 127.127.1.1Status : UnknownOffset : 0.000 ...
Resolved! ASDM stop working after upgrading ASA.
Hi,HiI have ASA Model : ASA 5525-XI just upgraded to a new ASA version: asa9-12-4-39-smp-k8.binASDM stop working, so I upgrade ASDM to asdm image disk0:/asdm-7131-101.bin as the compatibility request.https://www.cisco.com/c/en/us/td/docs/security/as...
Dears,I found the following log amongst the email received from our FTD:<173>:Nov 02 2022 12:44:28: %FTD-config-5-111010: User 'enable_1', running 'N/A' from IP 0.0.0.0, executed 'copy /noconfirm system:running-config disk0:/running-config-backup.txt...
Resolved! Cisco 9300 dot1x unauthorize port access
setting up my cisco-9300 switch with dot1x security on ports using active directory and clearpass radius.i have no problem of getting port to either unauthorize or authorize as predicted.the issue i am having is when port is set to unauthorize the t...
Saw a very curious issue today. Our estate runs Firepower 1120s in ASA mode running firmware 9.14.2.15. We found an ASA with firmware 9.16. Strangely, the 9.16 firmware was nowhere on disk0:, but after each reboot, the boot would persist to 9.16. We...
Hi all, First time poster.I have a VPN into GCP and from my normal LAN I can traverse the VPN fine and from other MPLS connected sites which also connects via the LAN interface from a Nexus. However from the DMZ interface on the same ASA which the VP...
Hi,I need the help. I have cisco C8300 router running in Autonomous mode. I can't enable MACSEC on interface level. When I try to enter the MACSEC command on interface level it shows invalid input. AS shown belowRouter(config)#interface tenGigabitEth...
